Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier: dIPC+AJ5j2Ke8cuPsUsCj24KqIkUvLfuUdqjpiDZ/70=
Subject key identifier: 99:DA:68:4A:E6:0F:18:42:8E:E8:FE:AB:82:5D:02:17:2A:D1:1A:FE
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer: /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial: 0194BCE0DAFB9107504DC718CFA1FE534767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number: 027E
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: wJZWkACD4z74xYl3Eh73b1e6c9o.roa (hash: EI0fca0IMjIZuHA6NlKScJkQo5wgsNdZcRbsaJt4IfY=)
2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: P0i29jpTTWThXSJuetUS8spxliF3j01G9gQK1N+I22I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:fb:91:07:50:4d:c7:18:cf:a1:fe:53:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=99da684ae60f18428ee8feab825d02172ad11afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:c7:2c:44:8a:b9:30:03:4e:dd:b7:a8:4d:
41:04:65:36:32:59:fc:8a:c7:53:e8:09:f0:41:9c:
51:d3:b5:5a:a9:5c:88:b7:e1:a4:0d:7e:19:d5:15:
eb:34:1e:18:c7:80:7f:90:4f:70:45:cc:f9:c9:e0:
3a:1d:31:0f:68:d0:65:17:d4:94:3d:5f:ac:37:8c:
61:4d:0f:f3:b6:f2:bc:5b:ef:f9:ef:a6:3f:17:2c:
66:08:f3:47:2b:dd:a1:a0:cc:03:d2:60:d5:dd:c4:
b0:d6:de:c3:79:48:12:6b:89:ad:b1:72:3e:af:03:
53:82:90:6f:5e:2c:0e:dd:29:ab:36:0e:a4:0e:00:
f4:1f:55:0c:f1:4b:d5:e1:ce:f8:c8:31:e4:ee:cc:
94:51:df:e4:24:9b:8d:8a:4b:7f:9b:ab:8f:7e:de:
4f:84:d1:23:14:a7:8d:00:fb:ec:e1:bd:ce:61:93:
dd:67:d1:ae:41:fe:82:20:56:19:90:18:bc:34:f7:
f2:76:c7:f7:c5:94:7b:df:e1:e1:27:4a:9c:e7:02:
a6:dd:56:f9:13:6a:0b:f4:81:37:29:69:ef:c9:b6:
2f:3f:77:a3:40:c6:0b:1a:fd:fc:56:7b:9b:0c:f3:
d9:e4:0d:c4:78:2d:35:e7:3a:71:1a:c0:7c:ff:33:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:68:4A:E6:0F:18:42:8E:E8:FE:AB:82:5D:02:17:2A:D1:1A:FE
X509v3 Authority Key Identifier:
keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3a:cb:53:f9:c0:a3:fe:a7:db:12:26:7a:4c:11:b4:4f:15:
eb:75:86:d0:1e:9f:6d:7b:d9:72:47:e8:52:3b:74:17:57:8c:
74:d6:7b:07:61:16:07:43:76:26:ec:08:2e:73:14:20:05:57:
50:28:9d:c2:e4:a0:9c:b9:b6:65:63:89:d3:ab:2e:b8:e4:78:
18:19:d7:ef:93:2a:a6:d7:6c:df:7a:0a:e4:08:f7:b4:e6:70:
5b:92:61:16:f1:37:db:5f:a2:28:27:80:93:a9:52:df:ea:b2:
dd:2a:f6:04:c2:6a:53:59:12:71:50:52:3a:cf:80:0b:6a:38:
7c:cf:94:1d:93:0f:a0:ea:d4:80:94:2c:f2:ec:67:69:5d:0e:
56:75:48:f9:2f:fb:16:4c:e1:43:75:73:38:bf:f2:28:f3:da:
c2:cf:79:c8:d6:f2:30:93:a0:75:10:a3:ce:aa:37:51:6f:ee:
af:93:e4:17:2e:04:01:29:bd:30:a5:f7:34:aa:26:f9:37:ed:
df:ab:e5:5e:0a:af:46:99:40:32:53:52:17:0c:60:4f:75:a4:
74:64:b2:e1:12:9e:24:ef:a8:41:d1:63:ab:52:3c:0c:0d:a9:
db:c3:8e:74:df:18:53:a6:8d:f4:e9:66:2d:d2:a3:22:04:30:
bf:4c:ab:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Nr7kQdQTccYz6H+U0dnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MGVkZDEwZTZkOTA2MjIxNWJmZDY0ZTQ1YjNiZjhhNmI5
OTYzNzkwHhcNMjUwMTMxMTUwMDQwWhcNMjUwMjAxMTUwMDQwWjAzMTEwLwYDVQQD
Eyg5OWRhNjg0YWU2MGYxODQyOGVlOGZlYWI4MjVkMDIxNzJhZDExYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFnHLESKuTADTt23qE1BBGU2Mln8
isdT6AnwQZxR07VaqVyIt+GkDX4Z1RXrNB4Yx4B/kE9wRcz5yeA6HTEPaNBlF9SU
PV+sN4xhTQ/ztvK8W+/576Y/FyxmCPNHK92hoMwD0mDV3cSw1t7DeUgSa4mtsXI+
rwNTgpBvXiwO3SmrNg6kDgD0H1UM8UvV4c74yDHk7syUUd/kJJuNikt/m6uPft5P
hNEjFKeNAPvs4b3OYZPdZ9GuQf6CIFYZkBi8NPfydsf3xZR73+HhJ0qc5wKm3Vb5
E2oL9IE3KWnvybYvP3ejQMYLGv38VnubDPPZ5A3EeC015zpxGsB8/zPi6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnaaErmDxhCjuj+q4JdAhcq0Rr+MB8GA1UdIwQY
MBaAFMkO3RDm2QYiFb/WTkWzv4prmWN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMt
MzFhNGRhNjFkNTc2LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NDgzYzItMzkyMS00YzZlLTkzNzMtMzFhNGRhNjFkNTc2
LzEveVE3ZEVPYlpCaUlWdjlaT1JiT19pbXVaWTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjrLU/nA
o/6n2xImekwRtE8V63WG0B6fbXvZckfoUjt0F1eMdNZ7B2EWB0N2JuwILnMUIAVX
UCidwuSgnLm2ZWOJ06suuOR4GBnX75Mqptds33oK5Aj3tOZwW5JhFvE321+iKCeA
k6lS3+qy3Sr2BMJqU1kScVBSOs+AC2o4fM+UHZMPoOrUgJQs8uxnaV0OVnVI+S/7
FkzhQ3VzOL/yKPPaws95yNbyMJOgdRCjzqo3UW/ur5PkFy4EASm9MKX3NKom+Tft
36vlXgqvRplAMlNSFwxgT3WkdGSy4RKeJO+oQdFjq1I8DA2p28OOdN8YU6aN9Olm
LdKjIgQwv0yr6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:25 2025 by rpki-client